Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/25b78a05-97b3-301c-a28c-49603b107639.roa
File:                     25b78a05-97b3-301c-a28c-49603b107639.roa (raw, json)
Hash identifier:          TabMnA8P00HQhZABA8av4993RVFVjsxOUn0GWzWhGnY=
Subject key identifier:   43:13:F2:30:7E:65:39:94:88:51:C1:F2:4B:51:E3:1E:42:49:50:46
Certificate issuer:       /CN=048641d6-b337-4557-8bae-329ba9998239
Certificate serial:       010D0C9F4328584B5B0738147DB561161A7B19C0
Authority key identifier: A3:5C:CA:7A:27:0B:CA:50:C8:49:59:00:B1:4F:89:72:63:25:CC:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/25b78a05-97b3-301c-a28c-49603b107639.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     27353
IP address blocks:        192.132.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/048641d6-b337-4557-8bae-329ba9998239.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/048641d6-b337-4557-8bae-329ba9998239.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:38:14:7d:b5:61:16:1a:7b:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048641d6-b337-4557-8bae-329ba9998239
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=e5f6f92b-1811-44b2-b28a-5cc0694bf105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d4:1d:c0:4c:54:25:e4:cb:c7:1d:4c:80:f8:
                    95:89:31:0b:64:97:a8:14:73:77:67:9f:2b:5a:ea:
                    24:d4:d4:91:14:2d:61:42:e2:54:9e:2a:47:66:82:
                    eb:39:bf:68:85:bd:5a:87:93:6d:46:8f:c0:88:97:
                    a4:a2:f0:57:1b:6a:1b:e3:d9:ce:12:b9:34:0a:c7:
                    41:4e:e3:a0:18:a2:1b:1d:94:7f:6f:42:15:7b:b9:
                    37:a2:e1:39:6d:5c:28:6a:61:d5:2f:d2:25:5d:65:
                    07:95:53:37:be:c8:d5:63:b1:1b:5a:9a:52:b8:88:
                    fe:59:e2:56:12:72:24:7c:91:3d:ba:56:f0:40:ae:
                    a0:76:87:a2:59:28:db:0a:65:af:f1:1c:52:47:c6:
                    0f:2d:32:fa:f5:79:34:c0:dc:52:7d:f5:49:11:0f:
                    45:dd:29:b2:46:56:2a:b3:eb:93:1f:85:94:74:01:
                    f5:ce:2a:53:cc:61:58:a8:ba:41:af:13:56:2b:d9:
                    d0:7c:bb:87:c1:3f:97:60:a4:54:76:9b:c3:d6:cd:
                    72:41:36:c7:ba:dd:21:04:9b:e9:0a:e8:88:fb:94:
                    7c:a2:20:3e:89:07:b3:e9:12:de:10:b1:29:4a:f4:
                    d3:3c:c7:92:a4:4c:13:1b:a0:f8:cb:65:6c:4f:27:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:13:F2:30:7E:65:39:94:88:51:C1:F2:4B:51:E3:1E:42:49:50:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/25b78a05-97b3-301c-a28c-49603b107639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/048641d6-b337-4557-8bae-329ba9998239.crl

            X509v3 Authority Key Identifier:
                keyid:A3:5C:CA:7A:27:0B:CA:50:C8:49:59:00:B1:4F:89:72:63:25:CC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.132.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:9e:9e:21:68:72:69:58:c6:6e:95:69:a1:6a:d8:15:11:f5:
         92:1b:09:41:e0:09:5a:78:4c:3e:2d:bf:18:4d:0b:cc:36:97:
         1d:6d:58:b8:d2:79:ae:da:74:3c:33:fe:10:7e:3c:00:9c:a8:
         b8:2b:39:3a:ea:4d:a6:0e:04:1f:ca:83:e0:00:42:a5:cd:2c:
         65:16:ac:a5:a6:85:e8:1d:61:c0:1d:55:1e:d6:b7:fe:9b:21:
         26:cb:12:cd:f2:51:da:ff:1d:6a:0a:eb:7a:ab:23:8f:55:2e:
         d5:26:dc:70:dd:bb:cb:b4:d0:6e:b3:a9:90:8f:6e:5e:e0:5e:
         90:5a:77:1c:95:fa:7a:94:26:f1:f4:51:aa:90:48:ca:54:04:
         e0:56:8d:12:bb:02:25:ca:48:77:8c:d5:8d:49:1a:4a:a1:a8:
         77:9e:21:95:3e:fd:d4:b1:bb:2e:27:0e:f3:1e:54:4c:c6:29:
         15:7a:d4:b0:ee:e5:b2:fa:ff:10:b1:92:a0:0f:b6:6c:0a:15:
         e5:cc:e0:27:56:0d:e2:18:14:60:c4:99:7e:bf:65:bc:df:eb:
         5f:ed:cd:cc:80:d7:94:04:ea:90:b6:3c:6f:0d:a0:3f:79:d5:
         67:72:0d:c6:4c:bb:41:f0:d1:56:3d:b3:93:21:cc:f3:77:0b:
         a1:1f:17:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:33:13 2025 by rpki-client